PT-2026-53261

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /edit class1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The...

PT-2026-53306

Name of the Vulnerable Software and Affected Versions Edimax EW-7478APC version 1.04 Description A buffer overflow exists in the POST Request Handler component. This issue occurs when the formUSBAccount function in the '/goform/formUSBAccount' endpoint processes the UserName and Password argument...

PT-2026-53191

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functionality of the file /preview5.php. Such manipulation of the argument course year section leads to sql injection. The attack may be performed from remote...

PT-2026-53318

Name of the Vulnerable Software and Affected Versions seladb PcapPlusPlus version 25.05 Description A heap-based buffer overflow exists in the Telnet Subnegotiation Packet Handler component. The issue occurs within the getSubCommand function located in the Packet++/src/TelnetLayer.cpp file. This...

PT-2026-53653

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the function BufWriter::append of the component EtherNet IP Message Handler. Performing a manipulation results in out-of-bounds write. Remote exploitation of the attack is...

PT-2026-53205

A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/models/Employee model.php of the component View Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack...

PT-2026-53169

A security flaw has been discovered in MyScale MyScaleDB up to 1.8.0. This vulnerability affects the function SegmentId::getCacheKey in the library src/VectorIndex/Common/SegmentId.h. The manipulation results in insufficient verification of data authenticity. It is possible to launch the attack...

PT-2026-53229

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The...

PT-2026-53173

A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulation of the argument security 5g can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publish...

PT-2026-53228

A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated remotely. The exploit has been made public and could b...

PT-2026-53317

Name of the Vulnerable Software and Affected Versions seladb PcapPlusPlus version 25.05 Description A heap-based buffer overflow exists in the TLS Hello Handler component. The issue occurs within the pcpp::SSLClientHelloMessage::getHandshakeVersion function located in the...

PT-2026-53246

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/mod room/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack...

PT-2026-53280

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patientdetail.php. Performing a manipulation of the argument editid results in sql injection. The attack may be initiated remotely. The explo...

PT-2026-53263

A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be...

PT-2026-53189

A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could ...

Microsoft Dynamics 365 Privilege Escalation

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

PT-2026-53195

A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/Employee model.php of the component Update Earn Leave Endpoint. The manipulation of the argument emid results in sql injection. The attack...

PT-2026-53307

Name of the Vulnerable Software and Affected Versions seladb PcapPlusPlus version 25.05 Description A heap-based buffer overflow exists in the LightPcapNg Parser component within the parse by block type function of the light pcapng.c file. This issue occurs when the captured packet length argumen...

PT-2026-53199

A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipulation of the argument siteurl can lead to sql injection. The attack can be executed remotely. A high complexity level is associated with this attack...

PT-2026-53241

A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod amenities/controller.php?action=edit. Performing a manipulation of the argument amen id results in sql injection. It is possible to initiate the attack remotely...